← Retour aux CVEs
CVE-2026-34353
MEDIUM5.9
Description
In OCaml through 4.14.3, Bigarray.reshape allows an integer overflow, and resultant reading of arbitrary memory, when untrusted data is processed.
Details CVE
Score CVSS v3.15.9
SeveriteMEDIUM
Vecteur CVSSCVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:H/I:N/A:N
Vecteur d'attaqueLOCAL
ComplexiteHIGH
Privileges requisNONE
Interaction utilisateurNONE
Publie3/27/2026
Derniere modification3/30/2026
Sourcenvd
Observations honeypot0
Faiblesses (CWE)
CWE-190
References
https://github.com/ocaml/ocaml/issues/14655(cve@mitre.org)
https://github.com/ocaml/ocaml/pull/14674(cve@mitre.org)
Correlations IOC
Aucune correlation enregistree
This product uses data from the NVD API but is not endorsed or certified by the NVD.